Senior ISSO - RMF/ATO Lead for Secure Systems

RPMGlobal; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Information System Security Officer to collaborate with application leads, system administrators, database administrators, developers, and testers to ensure security compliance and Authority to Operate (ATO) across assigned systems.

The role follows RMF for full/partial testing, CONMON, and no-test scenarios, updates SSPs, SCTMs, STPs, POAMs, and loads STIG/ACAS artifacts while addressing findings and supporting ST&E, ISSMs, and SCAs.

Qualifications

• Experience implementing and enforcing security policies, standards, and procedures to meet regulatory requirements.
• Proven track record conducting risk assessments and identifying vulnerabilities in systems, networks, and applications.
• Experience developing and overseeing mitigation strategies to reduce security risks.
• Strong background monitoring systems and networks for security breaches and anomalous activity.
• Evidence of responding to security incidents, investigating root causes, and implementing corrective actions.

Responsibilities

• Work with application leads, system administrators, database administrators, developers, and testers to ensure systems are security compliant and achieve or maintain ATO.
• Follow the RMF process for full test, partial test, continuous monitoring (CONMON), and no test.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIG checklists and mitigate scan findings.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to questions from the PAT team, ISSMs, and SCAs.

Skills

RMF process

Risk assessments

Security policies

Vulnerability management

Security monitoring

Incident response

STIG/ACAS experience

ATO readiness

Education

Bachelor's degree in CS/SE or related field

Job description

Base-2 Solutions is seeking a Senior Information System Security Officer to collaborate with application leads, system administrators, database administrators, developers, and testers to ensure security compliance and Authority to Operate (ATO) across assigned systems.

The role follows RMF for full/partial testing, CONMON, and no-test scenarios, updates SSPs, SCTMs, STPs, POAMs, and loads STIG/ACAS artifacts while addressing findings and supporting ST&E, ISSMs, and SCAs.